首页 | 本学科首页   官方微博 | 高级检索  
     

高性能公有云WAF安全方案
引用本文:何丹,张悦. 高性能公有云WAF安全方案[J]. 计算机系统应用, 2020, 29(4): 144-149
作者姓名:何丹  张悦
作者单位:中移(苏州)软件技术有限公司 云计算产品部,苏州 215000;中移(苏州)软件技术有限公司 大数据产品部,苏州 215000
基金项目:中国移动公有云项目(C201985-096)
摘    要:高性能云化WAF方案在WAF流量防护监测上设计了各个处理流程之间的协同调整处理能力以及同步机制,实现了处理步骤之间的能力相互感知,动态变化能力高效协同,解决了传统方案防护效率低的问题.另一方面高性能云化WAF方案在防护引流拓扑上设计了SDN牵引流量和策略下发分离,实现了WAF的并发防护调用,解决了传统方案防护吞吐量低的问题.实验表明高性能云化WAF方案对比传统云WAF防护方案有较高的防护效率,较高的防护吞吐量.

关 键 词:WAF  流量监控统计  并发拓扑  引流
收稿时间:2019-09-08
修稿时间:2019-10-08

High Performance WAF Security Scheme in Cloud Computing
HE Dan and ZHANG Yue. High Performance WAF Security Scheme in Cloud Computing[J]. Computer Systems& Applications, 2020, 29(4): 144-149
Authors:HE Dan and ZHANG Yue
Affiliation:Cloud Computing Sector, ChinaMobile (Suzhou) Software Technology Co. Ltd., Suzhou 215000, China and Big Data Sector, ChinaMobile (Suzhou) Software Technology Co. Ltd., Suzhou 215000, China
Abstract:By introducing an efficient statistical scheme for WAF traffic analysis processing which provides a mechanism for each processing Flow to dynamically adjust the processing capability, realizes dynamic adjustment processing capability, and realizes coordination adjustment processing capability and the synchronization mechanism between the various processing. On the other hand, in the traditional topology, drainage is started by the virtual network of the host machine or started by a stream serial thread with SDN. By introducing the high concurrent traction scheme in this study, the SDN traction Flow, strategy downward separation, and the concurrent protection of WAF are realized. Experimental results show that the scheme improves the accuracy of WAF protection and improves the WAF throughput.
Keywords:WAF  traffic statistics  concurrent topological  drainage
本文献已被 万方数据 等数据库收录!
点击此处可从《计算机系统应用》浏览原始摘要信息
点击此处可从《计算机系统应用》下载全文
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司  京ICP备09084417号